Deploy WARP using Kandji

Kandji deploys Cloudflare WARP as a custom app. For an overview of how Kandji deploys custom apps, refer to their knowledge base article Open external link .

​​ macOS

For the simplest deployment, Kandji has created a downloadable configuration profile that enables Cloudflare WARP’s user notifications and configures its Privacy Preference Policy Control ( PPPC Open external link ) to have Full Disk Access.

1. Download the custom profile Open external link .

2. Add the custom profile:

   1. Go to Library > Add New > Add Library Item > Custom Profile.
   2. Select Add & Configure.

3. Configure the custom profile:

   1. Enter a Name for the custom configuration profile.
   2. Assign your custom profile to a test Blueprint.
   3. Set Device Families to Mac.
   4. Upload the cloudflare_warp.mobileconfig file you previously downloaded.
   5. Save the custom profile.

   

4. Add a custom app:

   1. Go to Library > Add New > Add Library Item > Custom App.
   2. Select Add & Configure.

5. Configure the custom app:

   1. Name the custom app.

   2. Assign the custom app to the same test Blueprint used for the profile.

   3. Select Audit and Enforce as the installation type.

   4. Copy the Audit and Enforce Script below and paste it into the Audit Script text field.

   5. To enforce a minimum app version, update the ENFORCED_VERSION variable in the audit script with the version number the audit script should enforce (for example, 1.5.207.0).

      If ENFORCED_VERSION is left blank (""), the audit script will not check for a version and will only check for the presence of the Cloudflare WARP app in the Applications folder or a subfolder within Applications. Refer to the script comments for more details.

   6. In the Install Details section, select Installer Package.

   7. Under Installer Package, upload the Cloudflare_WARP_<VERSION>.pkg file. If you do not already have the installer package, download it here.

   8. Select Save.

To verify that Cloudflare WARP was installed, select the app in the Custom App library and view its Status tab.

​​ Audit and Enforce Script

The following audit script checks if the WARP client is installed and optionally enforces a minimum version number.